Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fR8wnoaeRRpiDc3aP8w_H4T8XYk.roa
File: fR8wnoaeRRpiDc3aP8w_H4T8XYk.roa (raw, json)
Hash identifier: MDSJ4KclVAIgkDB2umaOQqLqv3OZUs7lEg3QtaG+HUY=
Subject key identifier: 7D:1F:30:9E:86:9E:45:1A:62:0D:CD:DA:3F:CC:3F:1F:84:FC:5D:89
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D6C848B66B4A17E15EFB91BCCBC4
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fR8wnoaeRRpiDc3aP8w_H4T8XYk.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48014
IP address blocks: 5.160.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d6:c8:48:b6:6b:4a:17:e1:5e:fb:91:bc:cb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d1f309e869e451a620dcdda3fcc3f1f84fc5d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:fc:3a:e4:d2:cd:c9:c5:16:10:56:88:63:
ea:f0:19:5a:68:e8:47:f3:31:9d:7d:93:fe:c1:73:
38:30:5d:db:94:52:4f:4e:88:aa:1d:a3:ac:ff:f5:
24:84:f3:fd:a6:e5:a1:e3:38:aa:bd:a1:95:ce:92:
0a:e5:62:6f:8a:34:43:f3:a7:b4:55:0c:d1:86:3e:
e5:4b:55:bf:c3:40:38:85:2f:2c:c9:1f:7e:2b:c7:
f0:ce:d5:d7:dc:d4:dd:92:c7:d6:6d:e6:01:78:52:
9d:ae:23:64:7b:b3:69:c2:a1:e0:64:40:ca:32:6b:
9c:5b:3e:93:53:78:1d:d9:30:4d:fa:0a:73:89:96:
63:54:8e:58:b1:2d:83:36:30:91:3a:36:06:e6:b1:
bb:8d:36:10:b0:f0:49:3c:b4:1f:2f:ff:fa:b0:06:
7a:fe:c6:fa:3a:80:b2:d5:5d:af:8f:56:99:76:c8:
46:68:8e:75:4a:c5:c3:3a:2e:88:b3:0c:31:a6:29:
e7:af:8b:a2:01:96:72:3f:95:4d:0b:ad:37:d0:96:
30:25:89:91:9f:cd:59:e6:7e:35:2b:87:cb:68:36:
33:e3:aa:3d:c3:83:9f:19:79:e6:69:98:02:1b:9d:
7b:16:5a:73:16:63:0e:9d:c6:62:6a:e8:18:b7:39:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1F:30:9E:86:9E:45:1A:62:0D:CD:DA:3F:CC:3F:1F:84:FC:5D:89
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fR8wnoaeRRpiDc3aP8w_H4T8XYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.177.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0d:5d:79:cc:32:dc:25:3c:0c:0a:b2:c7:0d:0d:54:d3:b8:
37:dd:26:3e:17:b5:89:15:6d:a5:00:e8:66:a2:c6:32:ea:1c:
6d:1a:2f:2b:71:ca:01:a8:04:dc:65:58:2a:b1:cd:d5:27:b8:
84:be:da:ea:4d:d7:68:c9:e0:b1:bf:03:a5:62:28:8f:d7:35:
4c:f9:a0:d4:4a:71:b8:27:2e:3a:b8:64:c6:9a:86:e3:26:dc:
6b:ad:14:03:b9:7c:b7:86:cd:f2:cc:08:3b:2f:9c:fa:ae:36:
19:6a:35:02:00:06:52:92:4a:68:cb:f4:a2:4f:98:f1:4a:03:
81:af:cf:fa:82:bd:ad:ab:98:ec:d4:9f:b3:2a:f3:71:df:69:
89:75:33:c6:d3:34:8b:31:18:4b:a8:f3:4e:db:cb:f5:3b:02:
01:e1:66:95:52:6b:79:67:70:e9:fe:8c:e5:a4:62:15:db:a0:
d5:df:f5:7f:bc:0d:fe:2a:13:92:14:80:98:b8:8f:e4:dc:bb:
93:f0:63:58:19:4f:83:b1:8f:7a:71:05:e8:9a:0a:bc:2c:7e:
08:b0:b2:c9:cb:c0:dc:e8:b9:97:4a:d5:10:79:c2:a2:cd:f2:
2f:a3:5a:9e:e9:64:ac:9b:61:70:92:3b:79:32:d4:d3:c4:f5:
1a:67:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:51 2024 by rpki-client on console-ams.rpki-client.org